Job Description Summary
This role will focus on strengthening risk management practices in alignment with the Enterprise Risk Management Framework (ERMF). Responsibilities include advising leaders and Risk Owners on risk appetite decisions, interpreting technology risk, and applying practical risk solutions at pace.
The organisation encourages innovative thinking, collaboration, and continuous learning. Applicants should bring deep operational risk knowledge, strong understanding of modern technology, and experience contributing to risk policy, appetite, and control objectives that support customer, regulatory, and strategic outcomes.
What You’ll Be Doing
*Supporting the implementation of a risk and control oversight plan to assess compliance with relevant laws, regulations, industry standards, and established controls.
*Providing clear, pragmatic advice to support informed decisions, including balancing business objectives with risk appetite.
*Influencing senior stakeholders and confidently challenging where required.
*Conducting continuous monitoring of exposure relative to risk appetite, highlighting key trends and deviations.
*Developing and maintaining KRIs and KPIs for effective monitoring.
*Driving automation in risk measurement, monitoring, and reporting through collaboration with technology, data, and analytics teams.
*Escalating issues and shaping action plans to support sustainable risk management.
*Contributing to the design and implementation of risk policies, control objectives, and appetite to meet regulatory and operational risk commitments.
*Ensuring fair and consistent outcomes and compliance with internal controls, audit functions, and external regulatory expectations.
*Continuously reviewing and enhancing policies and appetite to reflect emerging risks, trends, and opportunities.
What You’ll Need
*Strong operational expertise in IT Systems Risk within a highly regulated environment, ideally Financial Services.
*Knowledge of operational risk frameworks and technology asset lifecycle management. *Understanding of relevant laws, regulations, industry standards, and good practice.
*Experience establishing and enhancing risk policies, appetite statements, control objectives, and performance indicators.
*Experience in monitoring and reporting on risk exposure.
*Curiosity and understanding of emerging technologies (e.g., AI, digital ledger technology, quantum computing).
*Ability to interpret how technological shifts impact the risk landscape.
*Strong judgement and ability to balance trade-offs between risk and opportunity.
*Capable of synthesising complex information to make effective recommendations.
*Strong communication and stakeholder management skills.
*Ability to collaborate across all lines of defence and build trusted internal/external partnerships.